CVE-2026-110527— WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass
Quick assessment
Affected
Unknown WP User Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 2.9.20 版本之前的 WP User Manager WordPress 插件中，当支付受限注册流程在后续支付步骤失败时，插件未能回滚其创建的 WordPress 账户，从而导致未认证用户能够在未完成支付的情况下创建可正常使用的账户。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110527
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | WP User Manager | 2.9 ~ 2.9.20 | - |
|
II. Public POCs for CVE-2026-110527
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110527
请登录查看更多情报信息。
Same Patch Batch · Unknown · 2026-10-17 · 12 CVEs total
| CVE-2026-97314 | ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclos | |
| CVE-2026-81344 | Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection | |
| CVE-2026-81343 | Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update vi | |
| CVE-2026-106470 | WP Data Access < 5.5.88 - Subscriber+ SSRF | |
| CVE-2026-103376 | PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay | |
| CVE-2026-92433 | Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF | |
| CVE-2026-92432 | Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter | |
| CVE-2026-92431 | Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration | |
| CVE-2026-104122 | Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name | |
| CVE-2026-104246 | Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Tra | |
| CVE-2026-91074 | BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute |
IV. Related Vulnerabilities
Same product: WP User Manager
-
CVE-2026-108496
WordPress WP User Manager plugin <= 2.9.23 - Broken Access C -
CVE-2026-107423
WordPress WP User Manager plugin <= 2.9.22 - Broken Access C -
CVE-2026-103085
WordPress WP User Manager plugin <= 2.9.20 - Privilege Escal -
CVE-2026-94079
WordPress WP User Manager plugin <= 2.9.19 - Broken Access C -
CVE-2026-49766
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File
Same vendor: Unknown
-
CVE-2026-97314
ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affi -
CVE-2026-81344
Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object -
CVE-2026-81343
Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated AC -
CVE-2026-106470
WP Data Access < 5.5.88 - Subscriber+ SSRF -
CVE-2026-103376
PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disc
V. Comments for CVE-2026-110527
No comments yet